Behavioral task
behavioral1
Sample
15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b.exe
Resource
win10v2004-20240802-en
General
-
Target
15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b
-
Size
109KB
-
MD5
3ca5186de383fd6397d7912c0008fe34
-
SHA1
d427922a4c9b98695d8d1840cb372b62446cf2b1
-
SHA256
15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b
-
SHA512
c8e75bd7407db492e0c17892a7ef1521c79791ba7143d25bbde1a98773bb8b51ead1890679f5232c5a6352d0b69de71fb2531787042ef068588d075ac683dad6
-
SSDEEP
1536:tIF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zA:tIF6F15h/zIn5S1aj+cU9CEw9aINejA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b
Files
-
15465e1da57906c764b429898d6bbebe9cbd7d1a2718774243b0679a77dc2f2b.exe windows:6 windows
Headers